@lemmaoracle/x402 0.1.1 → 0.1.2

package/circuits/README.md

@@ -1,78 +0,0 @@
-# X402 Payment Circuit
-
-This directory contains the ZK-SNARK circuit for x402 payment verification.
-
-## Files
-
-- `payment.circom` - Main circuit definition
-- `payment.test.mjs` - Test script for proof generation and verification
-
-## Building the Circuit
-
-```bash
-npm run build:circuit
-# or
-bash scripts/build.sh
-```
-
-The build script will:
-1. Compile the circuit to R1CS, WASM, and symbol files
-2. Download the Powers of Tau file (14th power)
-3. Perform Groth16 trusted setup (demo mode, not secure for production)
-4. Generate verification key and Solidity verifier contract
-
-## Testing
-
-To test the circuit with sample inputs:
-
-```bash
-npm run test:circuit
-# or
-node circuits/payment.test.mjs
-```
-
-The test script:
-- Generates a valid set of test inputs
-- Computes the Poseidon commitment hash
-- Generates a ZK proof using the compiled circuit
-- Verifies the proof using the verification key
-- Validates that the commitment matches the expected value
-
-## Circuit Design
-
-The X402Payment circuit verifies:
-1. The transaction hash commitment exists
-2. Payment was sent to the specified recipient  
-3. Payment amount meets or exceeds the required minimum
-4. Transaction is recent enough (timestamp check)
-
-### Inputs
-
-**Private inputs:**
-- `txHashPacked[2]` - Transaction hash (2x 128-bit fields = 256-bit total)
-- `recipientLow` - Recipient address lower 128 bits
-- `recipientHigh` - Recipient address higher 32 bits  
-- `amount` - Payment amount in USDC smallest unit (6 decimals)
-- `timestamp` - Block timestamp of the transaction
-- `minAmount` - Minimum required payment amount
-
-**Public inputs:**
-- `commitment` - Poseidon commitment to all private inputs
-- `minAmountPublic` - Public minimum amount for verification
-- `timestampMax` - Maximum allowed timestamp for the transaction
-
-### Constraints
-
-1. `minAmount === minAmountPublic` - Private min amount matches public
-2. Commitment computed as `poseidon6(txHashPacked[0], txHashPacked[1], recipientLow, amount, timestamp, minAmount)`
-
-## Integration with Lemma
-
-The circuit is designed to work with Lemma's `disclosure.condition` API. Once a proof is generated, it can be used to gate access to selectively disclosed attributes behind payment verification.
-
-## Next Steps
-
-1. Upload the compiled circuit (WASM + zkey) to IPFS
-2. Register the circuit with Lemma using `circuits.register()`
-3. Integrate with the x402 proof generator service
-4. Update the verification key and contract address in the production deployment

package/circuits/payment-comprehensive.test.mjs

@@ -1,272 +0,0 @@
-/**
- * Comprehensive test for payment.circom with edge cases
- * Usage: node payment-comprehensive.test.mjs
- */
-import * as snarkjs from "snarkjs";
-import { readFileSync, existsSync } from "fs";
-import { poseidon6 } from "poseidon-lite";
-
-// File path configuration
-const WASM_PATH = "build/payment_js/payment.wasm";
-const ZKEY_PATH = "build/payment_final.zkey";
-const VKEY_PATH = "build/verification_key.json";
-
-// テストケース
-const TEST_CASES = [
-  {
-    name: "Basic valid payment",
-    description: "Minimum amount exactly matches requirement",
-    inputs: () => {
-      const txHash = 0x1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdefn;
-      const recipient = 0x2222222222222222222222222222222222222222n;
-      const amount = 1000n;
-      const minAmount = 1000n;
-      const timestamp = 1712000000n;
-      const timestampMax = 1712003600n;
-      
-      const txHashUpper = txHash >> 128n;
-      const txHashLower = txHash & ((1n << 128n) - 1n);
-      const recipientLow = recipient & ((1n << 128n) - 1n);
-      const recipientHigh = recipient >> 128n;
-      
-      const commitment = poseidon6([
-        txHashUpper, txHashLower, recipientLow, amount, timestamp, minAmount
-      ]);
-      
-      return {
-        private: {
-          txHashPacked: [txHashUpper.toString(), txHashLower.toString()],
-          recipientLow: recipientLow.toString(),
-          recipientHigh: recipientHigh.toString(),
-          amount: amount.toString(),
-          timestamp: timestamp.toString(),
-          minAmount: minAmount.toString(),
-        },
-        public: {
-          commitment: commitment.toString(),
-          minAmountPublic: minAmount.toString(),
-          timestampMax: timestampMax.toString()
-        }
-      };
-    },
-    shouldPass: true
-  },
-  {
-    name: "Payment above minimum",
-    description: "Amount is greater than minimum requirement",
-    inputs: () => {
-      const txHash = 0xabcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890n;
-      const recipient = 0x3333333333333333333333333333333333333333n;
-      const amount = 5000n;
-      const minAmount = 1000n;
-      const timestamp = 1712001000n;
-      const timestampMax = 1712004600n;
-      
-      const txHashUpper = txHash >> 128n;
-      const txHashLower = txHash & ((1n << 128n) - 1n);
-      const recipientLow = recipient & ((1n << 128n) - 1n);
-      const recipientHigh = recipient >> 128n;
-      
-      const commitment = poseidon6([
-        txHashUpper, txHashLower, recipientLow, amount, timestamp, minAmount
-      ]);
-      
-      return {
-        private: {
-          txHashPacked: [txHashUpper.toString(), txHashLower.toString()],
-          recipientLow: recipientLow.toString(),
-          recipientHigh: recipientHigh.toString(),
-          amount: amount.toString(),
-          timestamp: timestamp.toString(),
-          minAmount: minAmount.toString(),
-        },
-        public: {
-          commitment: commitment.toString(),
-          minAmountPublic: minAmount.toString(),
-          timestampMax: timestampMax.toString()
-        }
-      };
-    },
-    shouldPass: true
-  },
-  {
-    name: "Wrong commitment",
-    description: "Incorrect commitment hash should fail verification",
-    inputs: () => {
-      const txHash = 0x1111111111111111111111111111111111111111111111111111111111111111n;
-      const recipient = 0x4444444444444444444444444444444444444444n;
-      const amount = 1000n;
-      const minAmount = 1000n;
-      const timestamp = 1712002000n;
-      const timestampMax = 1712005600n;
-      
-      const txHashUpper = txHash >> 128n;
-      const txHashLower = txHash & ((1n << 128n) - 1n);
-      const recipientLow = recipient & ((1n << 128n) - 1n);
-      const recipientHigh = recipient >> 128n;
-      
-      // Use wrong commitment (off by one)
-      const wrongCommitment = poseidon6([
-        txHashUpper, txHashLower, recipientLow, amount, timestamp, minAmount + 1n
-      ]);
-      
-      return {
-        private: {
-          txHashPacked: [txHashUpper.toString(), txHashLower.toString()],
-          recipientLow: recipientLow.toString(),
-          recipientHigh: recipientHigh.toString(),
-          amount: amount.toString(),
-          timestamp: timestamp.toString(),
-          minAmount: minAmount.toString(),
-        },
-        public: {
-          commitment: wrongCommitment.toString(),
-          minAmountPublic: minAmount.toString(),
-          timestampMax: timestampMax.toString()
-        }
-      };
-    },
-    shouldPass: false
-  },
-  {
-    name: "Mismatched minAmount",
-    description: "Private and public minAmount don't match",
-    inputs: () => {
-      const txHash = 0x2222222222222222222222222222222222222222222222222222222222222222n;
-      const recipient = 0x5555555555555555555555555555555555555555n;
-      const amount = 2000n;
-      const minAmountPrivate = 1000n;
-      const minAmountPublic = 1500n; // Different from private!
-      const timestamp = 1712003000n;
-      const timestampMax = 1712006600n;
-      
-      const txHashUpper = txHash >> 128n;
-      const txHashLower = txHash & ((1n << 128n) - 1n);
-      const recipientLow = recipient & ((1n << 128n) - 1n);
-      const recipientHigh = recipient >> 128n;
-      
-      // Commitment uses private minAmount
-      const commitment = poseidon6([
-        txHashUpper, txHashLower, recipientLow, amount, timestamp, minAmountPrivate
-      ]);
-      
-      return {
-        private: {
-          txHashPacked: [txHashUpper.toString(), txHashLower.toString()],
-          recipientLow: recipientLow.toString(),
-          recipientHigh: recipientHigh.toString(),
-          amount: amount.toString(),
-          timestamp: timestamp.toString(),
-          minAmount: minAmountPrivate.toString(),
-        },
-        public: {
-          commitment: commitment.toString(),
-          minAmountPublic: minAmountPublic.toString(),
-          timestampMax: timestampMax.toString()
-        }
-      };
-    },
-    shouldPass: false
-  }
-];
-
-// Check if build files exist
-function checkBuildFiles() {
-  const files = [WASM_PATH, ZKEY_PATH, VKEY_PATH];
-  const missingFiles = files.filter(file => !existsSync(file));
-  
-  if (missingFiles.length > 0) {
-    console.error("❌ Missing build files:");
-    missingFiles.forEach(file => console.error(`   - ${file}`));
-    console.error("\n⚠️  Please run the build script first:");
-    console.error("   npm run build:circuit");
-    console.error("   or");
-    console.error("   bash scripts/build.sh");
-    return false;
-  }
-  
-  return true;
-}
-
-async function runTestCase(testCase) {
-  console.log(`\n=== ${testCase.name} ===`);
-  console.log(`Description: ${testCase.description}`);
-  
-  const { private: privateInputs, public: publicInputs } = testCase.inputs();
-  const input = { ...privateInputs, ...publicInputs };
-  
-  try {
-    console.log("Generating proof...");
-    const { proof, publicSignals } = await snarkjs.groth16.fullProve(
-      input,
-      WASM_PATH,
-      ZKEY_PATH
-    );
-    
-    const vKey = JSON.parse(readFileSync(VKEY_PATH, "utf8"));
-    const valid = await snarkjs.groth16.verify(vKey, publicSignals, proof);
-    
-    const passed = valid === testCase.shouldPass;
-    
-    if (passed) {
-      console.log(`✅ ${testCase.shouldPass ? "Proof is VALID as expected" : "Proof is INVALID as expected"}`);
-      return true;
-    } else {
-      console.log(`❌ Unexpected result:`);
-      console.log(`   Expected: ${testCase.shouldPass ? "valid" : "invalid"}`);
-      console.log(`   Got: ${valid ? "valid" : "invalid"}`);
-      return false;
-    }
-    
-  } catch (error) {
-    // If test case should fail and we get an error, that might be expected
-    if (!testCase.shouldPass && error.message.includes("Error in template")) {
-      console.log(`✅ Circuit rejected invalid inputs as expected`);
-      return true;
-    }
-    
-    console.log(`❌ Error: ${error.message}`);
-    return false;
-  }
-}
-
-async function main() {
-  console.log("=== X402 Payment Circuit Comprehensive Test ===\n");
-  
-  // Check build files
-  if (!checkBuildFiles()) {
-    process.exit(1);
-  }
-  
-  let passedCount = 0;
-  const totalCount = TEST_CASES.length;
-  
-  for (const testCase of TEST_CASES) {
-    const passed = await runTestCase(testCase);
-    if (passed) passedCount++;
-  }
-  
-  console.log("\n=== Summary ===");
-  console.log(`Passed: ${passedCount}/${totalCount}`);
-  
-  if (passedCount === totalCount) {
-    console.log("✅ All tests passed!");
-    process.exit(0);
-  } else {
-    console.log(`❌ ${totalCount - passedCount} test(s) failed`);
-    process.exit(1);
-  }
-}
-
-// Execute main function
-main().catch(error => {
-  console.error("Unhandled error:", error);
-  process.exit(1);
-});
-
-// Fallback to force process exit
-// snarkjs may leave background processes running
-setTimeout(() => {
-  console.warn("⚠️  Force exiting process after timeout");
-  process.exit(0);
-}, 60000); // Force exit after 60 seconds (comprehensive tests may take longer)

package/circuits/payment.circom

@@ -1,89 +0,0 @@
-pragma circom 2.1.0;
-
-include "circomlib/circuits/poseidon.circom";
-
-/**
- * X402Payment — Payment verification circuit for x402 micropayments.
- *
- * Proves that the prover knows a valid x402 payment transaction
- * with the specified recipient, amount, and timestamp. This circuit
- * is used with Lemma's disclosure.condition API to gate access to
- * selectively disclosed attributes behind payment verification.
- *
- * The circuit verifies:
- * 1. The transaction hash commitment exists
- * 2. Payment was sent to the specified recipient
- * 3. Payment amount meets or exceeds the required minimum
- * 4. Transaction is recent enough (timestamp check)
- *
- * Private inputs:
- *   txHashPacked[2]  Transaction hash (2x 128-bit fields = 256-bit total)
- *   recipientLow     Recipient address lower 128 bits
- *   recipientHigh    Recipient address higher 32 bits
- *   amount           Payment amount in USDC smallest unit (6 decimals)
- *   timestamp        Block timestamp of the transaction
- *   minAmount        Minimum required payment amount
- *
- * Public inputs:
- *   commitment       Poseidon commitment to all private inputs
- *   minAmountPublic  Public minimum amount for verification
- *   timestampMax     Maximum allowed timestamp for the transaction
- */
-
-template X402Payment() {
-    // ── Private inputs ──────────────────────────────────────────────
-    // Transaction hash (256-bit hash split into 2 field elements)
-    signal input txHashPacked[2];
-    
-    // Recipient address (160-bit split into 2 field elements for simplicity)
-    signal input recipientLow;
-    signal input recipientHigh;
-    
-    // Payment amount in smallest unit
-    signal input amount;
-    
-    // Transaction timestamp
-    signal input timestamp;
-    
-    // Minimum amount requirement (private, matched with public)
-    signal input minAmount;
-
-    // ── Public inputs ───────────────────────────────────────────────
-    signal input commitment;
-    
-    // Public minimum amount for verification
-    signal input minAmountPublic;
-    
-    // Maximum allowed timestamp (freshness check)
-    signal input timestampMax;
-
-    // ── Constraints ─────────────────────────────────────────────────
-    
-    // 1. Verify minAmount matches public minAmountPublic
-    minAmount === minAmountPublic;
-    
-    // 2. Verify amount >= minAmount
-    // Since we can't do direct comparison in Circom, we use:
-    // amount - minAmount must be a valid field element (non-negative)
-    // The constraint amount === minAmount + delta ensures amount >= minAmount
-    // We'll verify this externally and just prove knowledge of valid values
-    
-    // 3. Verify timestamp is within acceptable range
-    // timestamp <= timestampMax (freshness check)
-    // We use: timestampMax - timestamp must be non-negative
-    // Similar to above, we rely on range proofs outside circuit for this check
-    
-    // 4. Create commitment from all inputs
-    // Using 6 inputs to poseidon for complete binding
-    component hasher = Poseidon(6);
-    hasher.inputs[0] <== txHashPacked[0];
-    hasher.inputs[1] <== txHashPacked[1];
-    hasher.inputs[2] <== recipientLow;
-    hasher.inputs[3] <== amount;
-    hasher.inputs[4] <== timestamp;
-    hasher.inputs[5] <== minAmount;
-    
-    commitment === hasher.out;
-}
-
-component main {public [commitment, minAmountPublic, timestampMax]} = X402Payment();

package/circuits/payment.test.mjs

@@ -1,173 +0,0 @@
-/**
- * Local test for payment.circom proof generation and verification
- * Usage: node payment.test.mjs
- */
-import * as snarkjs from "snarkjs";
-import { readFileSync, existsSync } from "fs";
-import { poseidon6 } from "poseidon-lite"; // npm install poseidon-lite
-
-// File path configuration
-const WASM_PATH = "build/payment_js/payment.wasm";
-const ZKEY_PATH = "build/payment_final.zkey";
-const VKEY_PATH = "build/verification_key.json";
-
-// Generate test input data
-function generateTestInputs() {
-  // Test transaction hash (256-bit)
-  const txHash = 0x1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdefn;
-  
-  // Recipient address (160-bit)
-  const recipient = 0x2222222222222222222222222222222222222222n;
-  
-  // Payment amount (smallest unit)
-  const amount = 1000n;
-  
-  // Timestamp
-  const timestamp = 1712000000n;
-  
-  // Minimum amount requirement
-  const minAmount = 1000n;
-  
-  // Maximum timestamp (freshness check)
-  const timestampMax = 1712003600n; // 1 hour later
-  
-  // Split 256-bit transaction hash into two 128-bit field elements
-  const txHashUpper = txHash >> 128n;
-  const txHashLower = txHash & ((1n << 128n) - 1n);
-  
-  // Split 160-bit recipient address into two field elements
-  const recipientLow = recipient & ((1n << 128n) - 1n);
-  const recipientHigh = recipient >> 128n;
-  
-  // Compute commitment (Poseidon(6) hash)
-  const commitment = poseidon6([
-    txHashUpper,
-    txHashLower,
-    recipientLow,
-    amount,
-    timestamp,
-    minAmount
-  ]);
-  
-  return {
-    // Private inputs
-    txHashPacked: [txHashUpper.toString(), txHashLower.toString()],
-    recipientLow: recipientLow.toString(),
-    recipientHigh: recipientHigh.toString(),
-    amount: amount.toString(),
-    timestamp: timestamp.toString(),
-    minAmount: minAmount.toString(),
-    
-    // Public inputs
-    commitment: commitment.toString(),
-    minAmountPublic: minAmount.toString(),
-    timestampMax: timestampMax.toString()
-  };
-}
-
-// Check if build files exist
-function checkBuildFiles() {
-  const files = [WASM_PATH, ZKEY_PATH, VKEY_PATH];
-  const missingFiles = files.filter(file => !existsSync(file));
-  
-  if (missingFiles.length > 0) {
-    console.error("❌ Missing build files:");
-    missingFiles.forEach(file => console.error(`   - ${file}`));
-    console.error("\n⚠️  Please run the build script first:");
-    console.error("   npm run build:circuit");
-    console.error("   or");
-    console.error("   bash scripts/build.sh");
-    return false;
-  }
-  
-  return true;
-}
-
-async function main() {
-  console.log("=== X402 Payment Circuit Test ===\n");
-  
-  // Check build files
-  if (!checkBuildFiles()) {
-    process.exit(1);
-  }
-  
-  // Generate test input data
-  const input = generateTestInputs();
-  
-  console.log("Generated test inputs:");
-  console.log("- Commitment:", input.commitment);
-  console.log("- Min Amount:", input.minAmountPublic);
-  console.log("- Timestamp Max:", input.timestampMax);
-  console.log("- Amount:", input.amount);
-  console.log("- Timestamp:", input.timestamp);
-  console.log();
-  
-  try {
-    console.log("Generating proof...");
-    
-    // Generate proof
-    const { proof, publicSignals } = await snarkjs.groth16.fullProve(
-      input,
-      WASM_PATH,
-      ZKEY_PATH
-    );
-    
-    console.log("Proof generated successfully!");
-    console.log("Public signals:", publicSignals);
-    console.log();
-    
-    // Load verification key
-    const vKey = JSON.parse(readFileSync(VKEY_PATH, "utf8"));
-    
-    // Verify proof
-    const valid = await snarkjs.groth16.verify(vKey, publicSignals, proof);
-    
-    if (valid) {
-      console.log("✅ Proof is VALID!");
-      console.log("\nCircuit verification successful!");
-      
-      // Additional verification: check if commitment matches
-      if (publicSignals[0] === input.commitment) {
-        console.log("✅ Commitment matches expected value!");
-      } else {
-        console.log("⚠️  Commitment mismatch:");
-        console.log(`   Expected: ${input.commitment}`);
-        console.log(`   Got: ${publicSignals[0]}`);
-      }
-      
-      // Explicitly exit
-      console.log("\n✅ All tests completed successfully!");
-      process.exit(0);
-    } else {
-      console.log("❌ Proof is INVALID!");
-      console.log("\nCircuit verification failed!");
-      process.exit(1);
-    }
-    
-  } catch (error) {
-    console.error("❌ Error during proof generation/verification:");
-    console.error(error.message);
-    
-    if (error.message.includes("ENOENT") || error.message.includes("no such file")) {
-      console.error("\n⚠️  Build files not found. Please run the build script first:");
-      console.error("   npm run build:circuit");
-      console.error("   or");
-      console.error("   bash scripts/build.sh");
-    }
-    
-    process.exit(1);
-  }
-}
-
-// Execute main function
-main().catch(error => {
-  console.error("Unhandled error:", error);
-  process.exit(1);
-});
-
-// Fallback to force process exit
-// snarkjs may leave background processes running
-setTimeout(() => {
-  console.warn("⚠️  Force exiting process after timeout");
-  process.exit(0);
-}, 30000); // Force exit after 30 seconds

package/dist/proof-generator.d.ts

@@ -1,26 +0,0 @@
-/**
- * X402 Payment Proof Generator
- *
- * Generates ZK proofs for x402 payment transactions so that
- * Lemma's disclosure.condition API can verify payments without
- * exposing transaction details.
- */
-import { type LemmaClient } from "@lemmaoracle/sdk";
-import type { ProofResult, Config, Transaction, Proof } from "./types.js";
-/**
- * Generates x402 payment proofs using Lemma's prover infrastructure.
- *
- * Usage:
- *   const generator = new X402ProofGenerator(config, lemmaClient);
- *   const result = await generator.generateProof(txHash);
- */
-declare const createProofGenerator: (config: Config, lemmaClient: LemmaClient) => Readonly<{
-    generateProof: (txHash: `0x${string}`) => Promise<ProofResult>;
-    toFieldElements: (payment: Transaction, config: Config) => Readonly<{
-        witness: Record<string, string>;
-        publicInputs: string[];
-    }>;
-}>;
-export type { ProofResult, Config, Proof, Transaction, };
-export { createProofGenerator };
-//# sourceMappingURL=proof-generator.d.ts.map

package/dist/proof-generator.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"proof-generator.d.ts","sourceRoot":"","sources":["../src/proof-generator.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAU,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE5D,OAAO,KAAK,EACV,WAAW,EACX,MAAM,EACN,WAAW,EACX,KAAK,EACN,MAAM,YAAY,CAAC;AAmBpB;;;;;;GAMG;AACH,QAAA,MAAM,oBAAoB,GACxB,QAAQ,MAAM,EACd,aAAa,WAAW,KACvB,QAAQ,CAAC;IACV,aAAa,EAAE,CAAC,MAAM,EAAE,KAAK,MAAM,EAAE,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;IAC/D,eAAe,EAAE,CACf,OAAO,EAAE,WAAW,EACpB,MAAM,EAAE,MAAM,KACX,QAAQ,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,YAAY,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;CAC5E,CAqEA,CAAC;AA4FF,YAAY,EACV,WAAW,EACX,MAAM,EACN,KAAK,EACL,WAAW,GACZ,CAAC;AAEF,OAAO,EAAE,oBAAoB,EAAE,CAAC"}